Fix potential SQLi through improper use of API functions.

git-svn-id: https://develop.svn.wordpress.org/trunk@24875 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Jon Cave
2013-07-29 18:16:47 +00:00
parent 16adf7644b
commit 707bd3ae4a
2 changed files with 2 additions and 2 deletions
+1 -1
View File
@@ -186,7 +186,7 @@ function get_bookmarks($args = '') {
}
if ( ! empty($search) ) {
$search = like_escape($search);
$search = esc_sql( like_escape( $search ) );
$search = " AND ( (link_url LIKE '%$search%') OR (link_name LIKE '%$search%') OR (link_description LIKE '%$search%') ) ";
}